Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8D86EC1E5211EF9852D9317DDC24C2.roa
File: DE8D86EC1E5211EF9852D9317DDC24C2.roa (raw, json)
Hash identifier: ulslCZJ3HUcNCxgisBKnz+/Rbqh/5G0MQOotnv+qQ2w=
Subject key identifier: 66:4C:1F:E0:36:EC:BF:ED:10:BA:B7:30:01:95:5F:C8:A4:1E:19:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: BBFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8D86EC1E5211EF9852D9317DDC24C2.roa
Signing time: Thu 30 May 2024 07:04:34 +0000
ROA not before: Thu 30 May 2024 07:04:31 +0000
ROA not after: Mon 01 Jul 2024 07:04:31 +0000
asID: 44559
IP address blocks: 154.209.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 06:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48126 (0xbbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 07:04:31 2024 GMT
Not After : Jul 1 07:04:31 2024 GMT
Subject: CN=66582502-ef5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:a8:c8:f9:aa:a3:8c:af:19:7d:da:b3:4e:
62:cb:6d:71:db:c1:16:e0:7f:65:42:ab:00:6a:17:
f1:3e:2a:79:cc:32:7a:e5:cb:84:52:4e:63:72:06:
c1:29:22:44:04:cd:8f:d2:ac:a3:2d:78:1d:f2:fc:
2c:f6:f1:6e:f3:be:a2:25:bb:8d:5b:99:8a:b1:b6:
68:e6:18:21:ae:94:a2:68:9b:2d:c5:0a:21:59:1e:
de:65:27:75:3f:93:30:5d:43:08:5a:d9:04:1a:91:
78:7a:91:be:c6:d3:29:f8:a0:c7:d6:a0:52:dc:aa:
84:f6:d3:f6:4b:06:ec:f4:9a:ac:88:86:4c:bf:26:
a2:dc:17:4b:46:f6:7a:92:2b:d6:9e:84:a5:f5:31:
fd:31:49:94:f9:c0:92:39:7a:25:31:5e:e5:d2:db:
a9:ac:71:ea:4f:c3:99:c1:94:62:bb:d2:fe:6d:80:
9e:75:d3:9b:aa:a0:ba:08:bc:52:da:2c:2c:a2:7e:
99:2d:bc:c1:17:1a:8e:23:25:0b:fa:ba:45:e7:c4:
e1:24:e7:67:d6:e5:09:48:c5:80:a6:29:df:e1:57:
02:b9:1a:c6:8f:9b:e4:4f:ba:d8:bb:1b:e7:57:85:
80:70:05:8f:cc:91:42:6f:a2:ff:4f:1c:58:0b:e6:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:1F:E0:36:EC:BF:ED:10:BA:B7:30:01:95:5F:C8:A4:1E:19:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE8D86EC1E5211EF9852D9317DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.136.0/21
Signature Algorithm: sha256WithRSAEncryption
89:62:57:9f:2f:ab:67:9a:34:5b:c8:43:eb:3e:80:a3:91:c8:
cc:ff:25:92:56:49:d3:ee:d3:c7:b6:a9:cb:b5:72:7c:a8:df:
12:78:53:c9:1a:b9:b0:f5:9e:5e:c1:43:34:e9:3e:55:f0:66:
0f:a6:db:d3:17:06:c5:76:59:54:06:e2:70:0d:f2:13:5c:58:
4e:b4:7b:b7:ba:22:e5:fb:b8:e0:20:1e:93:da:9b:89:ae:b3:
e9:2d:5c:68:87:08:d3:01:0a:e8:ee:ef:e3:06:a1:9b:bc:16:
e3:94:8c:6a:c9:ee:51:2a:7a:c7:3c:ea:e4:46:fb:ad:1c:fa:
e3:8e:5e:a3:00:22:98:fa:27:87:f1:54:3f:99:c4:1c:d8:24:
35:67:f3:a1:1e:98:db:af:06:90:5b:9f:ca:61:ff:5f:4e:3a:
c4:1c:7a:ce:1c:71:18:0f:06:5c:a0:0b:b1:ae:ba:5e:c8:42:
99:0b:22:5b:31:64:da:c5:3b:90:8a:a6:92:50:17:3c:6a:58:
5b:c1:64:0b:0b:0e:1b:51:ff:2b:54:0e:9d:5e:8f:c7:6c:f8:
4a:fc:e8:f7:73:b3:3b:82:30:1b:e4:f8:c7:99:c6:2c:61:ea:
a6:7a:04:0f:4e:ea:2a:03:2f:2c:3c:61:f9:e0:da:06:43:cb:
46:79:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:40 2024 by rpki-client on console-ams.rpki-client.org